Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/GHA9nU3HTwqwVIGyY7o95UjrOzQ.roa
File: GHA9nU3HTwqwVIGyY7o95UjrOzQ.roa (raw, json)
Hash identifier: adHX1Hv5Kdg5owjSVDU8f89YpdoYbGAPxvTOdsU5k5M=
Subject key identifier: 18:70:3D:9D:4D:C7:4F:0A:B0:54:81:B2:63:BA:3D:E5:48:EB:3B:34
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 041D41E3
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/GHA9nU3HTwqwVIGyY7o95UjrOzQ.roa
Signing time: Sat 01 Jan 2022 06:58:35 +0000
ROA not before: Sat 01 Jan 2022 06:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9104
IP address blocks: 212.3.160.0/19 maxlen: 24
195.60.128.0/19 maxlen: 24
185.161.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69026275 (0x41d41e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Jan 1 06:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18703d9d4dc74f0ab05481b263ba3de548eb3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:43:de:93:4d:d8:c1:7d:84:98:96:1a:23:
b6:dc:7f:66:17:a2:4c:a9:32:dd:33:4e:99:3d:e6:
9f:37:db:df:d0:73:60:5f:90:0b:d6:e2:34:d6:62:
3e:30:1c:e0:5e:d4:01:ed:2b:dc:16:90:f8:de:56:
9f:cb:5b:19:a6:0f:62:b5:2f:f3:08:1e:64:c0:00:
c7:09:8a:fd:10:c0:1c:86:7a:d4:16:ec:d2:cd:7e:
d8:44:04:0f:27:15:86:0a:f6:0c:a3:8f:35:f5:01:
bd:a8:56:2b:ed:2b:6f:d0:92:f0:24:ee:77:68:a9:
b0:7b:d2:28:72:4c:1a:a1:e2:7f:d7:07:06:36:8e:
e7:63:ed:e2:31:3e:55:ed:24:26:ce:22:62:78:6c:
95:a0:8f:18:67:08:f2:ca:c2:c8:08:e2:21:32:f4:
55:23:37:5e:36:08:0a:85:84:db:26:33:9d:fa:0e:
3d:76:51:d2:17:6a:02:19:26:d9:29:3a:06:ac:a0:
81:9e:56:d6:f5:de:65:2f:44:06:23:02:0e:71:69:
ff:9b:7e:99:de:78:bd:0e:50:6d:1b:00:e8:57:bd:
f4:c1:c5:ad:8c:61:d8:a9:68:0c:1d:69:cb:4a:ed:
b7:b3:ec:f3:d7:2f:59:41:2c:f7:b4:61:91:b9:23:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:3D:9D:4D:C7:4F:0A:B0:54:81:B2:63:BA:3D:E5:48:EB:3B:34
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/GHA9nU3HTwqwVIGyY7o95UjrOzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.220.0/22
195.60.128.0/19
212.3.160.0/19
Signature Algorithm: sha256WithRSAEncryption
db:10:49:24:40:cb:14:03:65:e9:ff:1c:d6:b7:b7:90:cf:3e:
f4:d1:31:b3:43:40:a6:80:d8:d7:4d:29:a8:a1:ae:ba:99:6d:
85:99:bb:ef:b5:bf:aa:94:31:ed:ba:3b:58:63:b0:2e:6e:f5:
bc:a5:97:4d:3f:09:f6:b3:e7:f4:85:cd:ac:fa:35:d6:c2:1c:
01:9c:fc:c5:23:6f:f4:8b:46:f4:9f:f0:83:21:a7:34:e5:f9:
bb:9b:be:fd:f7:28:07:cd:fc:91:df:d4:82:81:73:31:e8:9a:
0c:dd:09:d7:27:59:4b:c7:c3:bf:99:1c:70:31:7a:d8:27:e2:
d8:96:e1:ac:21:f8:f5:39:48:15:31:e6:35:95:f2:a1:49:2d:
9c:64:07:0e:c2:61:c7:82:7b:17:55:1a:5d:2e:9a:ca:d7:86:
a8:ad:78:53:ca:9d:5d:cd:1a:89:d4:d7:ea:40:82:98:fd:82:
2b:00:53:7f:93:30:d4:52:23:1b:ed:d6:44:90:da:96:bd:0a:
cc:0d:10:65:01:27:87:66:98:74:fd:fa:62:ec:36:ec:9f:09:
b1:27:d9:cc:da:79:6a:cc:67:71:4e:9f:23:6d:4c:e1:63:47:
8e:3c:28:0d:41:d2:c3:eb:6c:43:7d:5b:ba:1f:24:5e:86:b3:
10:69:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org